ATT&CKProcedure examples

Procedure examples

Real-world descriptions of how a group, tool or campaign used a technique.

Software: S1242×

52 examples

TechniqueUsed byProcedure example
T1685.005
Clear Windows Event Logs
MalwareQilin

Qilin has the ability to clear Windows Event Logs.

T1688
Safe Mode Boot
MalwareQilin

Qilin can reboot targeted systems in safe mode to avoid detection.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.